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(54) System and method for providing encryption for rerouting of real time multi-media flows 



(57) A system for providing encryption for the rerout- 
ing of multi-media data flow packets is disclosed. Gen- 
erally, a first endpoint is connected to a second end- 
point, wherein the first endpoint comprises a transceiv- 
er, encryption software stored within the first endpoint 
defining functions to be performed by the first endpoint, 
and a processor. The processor is configured by the en- 
cryption software to perform the steps of: assigning a 
sequence number to a first multi-media data flow packet 



received by a first endpoint. wherein the first multi-media 
data flow packet is within a series of multi-media data 
flow packets; pseudo-randomly shuffling the sequence 
number of the first multi-media data flow packet; and. 
transmitting the pseudo-randomly shuffled sequence 
number to a second endpoint. These steps may be per- 
formed by a programmed controller, or other hardware, 
instead of, or in addition to, being performed in accord- 
ance with software. 
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Description 

FIELD OF THE INVENTION 

5 [0001] The present Invention relates generally to the transmission of multi-media data packets, and more particularly 
to the encryption of multi-media data packets. 

BACKGROUND OF THE INVENTION 

10 [0002] The public switched telephone network (PSTN) has evolved into an efficient real-time, multi-media commu- 
nication session tool wherein users can pick up any one of nearly one billion telephones and dial any one of nearly 
one billion endpolnts. Several developments have enabled this automated network, such as numbering plans, distrib- 
uted electronic switching and routing, and networked signaling systems. 

[0003] Similar to the manner in which the PSTN is based on a hierarchy, the Internet is based on an Internet protocol 
15 (IP). IP messages are routed or forwarded from one link to the next (i.e., from a source of a data flow to a destination 
of the data flow). Each IP packet contains an IP address, which, in Internet protocol version 4 (IPv4), has 32 bits. Each 
IP address also has a certain number of bits dedicated to a network portion and a certain number of bits dedicated to 
a host portion. 

[0004] IP routers are used to take a data packet from one network (or link) and place it onto another network (or 

20 link). Tables are located within IP routers that contain information or criteria used to determine a best way to route the 
data packet. An example of this information may be the state of network links and programmed distance indications. 
By using intelligent devices on both sides of a network domain, it is possible to allocate a temporary address to route 
a packet through a network and restore the original address on the far side of the network when the packet leaves the 
network. This is the basis for many current virtual private network (VPN) products and is understood in the art. 

25 [0005] To ensure that the network elements (e.g., switches in the telephone network, routers in the data network) 
can perform their associated tasks, it helps for them to know the status of adjacent communication links and available 
routes; signaling systems are used to provide this information. In telephone networks, signaling systems used are 
either SS7 or are equivalent to 887. The signaling system provides information about individual links, link sets, routes, 
etc. In data networks, protocols such as border gateway protocol (BGP), interior gateway protocol (IGP), open shortest 

30 path first (OSPF), etc., are used to determine link states and routes. 

[0006] Due to most current telecommunication endpoints receiving service through a PSTN-based system, a gateway 
is used to facilitate a multi-media data flow between a packet data network and a PSTN. Gateways are installed at 
edges between data networks and voice networks, wherein the gateways are used to convert multi-media (and sign- 
aling) to ensure communication. There are several strategies for routing calls received by gateways to other gateways 

35 described in the art. Two of these strategies are full mesh routing and hierarchical routing. Full mesh routing is the 
standard method described in most of the softswitching architectures. Session initiation protocol (SIP) is the inter- 
Softswitch signaling system because it supports an anywhere-to-anywhere signaling model. In this model, softswitches 
have a virtual connection to other softswitches for completing calls. Routing tables are instantiated that can be used 
to direct traffic to a Softswitch based on policy provided by the Softswitch maker. 

40 [0007] Unfortunately, when running a network that comprises many softswitches, the owner of the network has many 
different points of policy management that need to be maintained to create a full mesh. Such policy management issues 
Include assuring that each Softswitch knows the IP address of each other Softswitch and what telephone numbers or 
PSTN to which they connect. When running softswitches from multiple vendors, further management issues arise. The 
management issues are then more complicated due to the fact that the equipment may be managed through different 

45 interfaces. 

[0008] When the number of softswitches deployed grows large, the sharing of different routes is likely. In the full 
mesh routing arrangement, the routing of calls may be difficult since several different egress softswitches may be full 
or not functioning. For example, if a carrier has thirty softswitches that can handle national long distance, and the 
network is running at about 50% full, then each originating Softswitch will likely have to try an average of fifteen (15) 
50 separate softswitches before finding one with a non-blocked route. This search effort can be greatly reduced If a purely 
random distribution is implemented, however, it is assumed that some routes would be preferred over others due to 
cost or quality, thereby exacerbating the problem. 

[0009] Therefore, guiding real-time packet fiows, such as, but not limited to, multi-media fiows, through certain thresh- 
olds, which is required to create a high-quality border between various IP networks, is important. Without proper guid- 
es ance, the packets would fiow whichever way the networks would allow, thereby subjecting multi-media data packets 
to disruptive paths, as well as upstream and downstream failures. 

[0010] If a guided multi-media data flow is traversing over public networks, it is desirable to prevent any person from 
eavesdropping on the communication. To address this issue, signaling channels can be encrypted using transport layer 
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security (TLS), however, there is no known mechanism for encrypting multi-media data packets. Endpoints are assumed 
to comprise functionality to perform encryption. This is problematic in a network where sessions are routed to desti- 
nations such as telephone numbers. The problem is that the actual termination point is unknown until it is discovered. 
As an example, there may be multiple different termination points possible for a particular communication session. The 
5 actual termination point chosen may be selected for different reasons. Therefore, when fon^/ard routing a communica- 
tion session, the actual terminating equipment is not known in advance. 

[0011] Specific reasons for problems associated with encryption are based on currently used mechanisms. As an 
example, a certificate of authentication, and a certificate of authority are generally used in the most advanced fonns 
of encryption. The volume and delays associated with using certificate servers are significant. It may also be the case 
10 that using manually distributed private keys could work, however, this is the case if the number of destinations are 
limited to a known set in advance which would facilitate the distribution. 

SUMMARY OF THE INVENTION 

15 [0012] In light of the foregoing, the preferred embodiment of the present invention generally relates to a system and 
method for providing encryption for rerouting multi-media data flow packets. 

[0013] Generally, with reference to the structure of the encryption system, the system utilizes a first endpoint, which 
is connected to a second endpoint, wherein the first endpoint comprises a transceiver, encryption software stored within 
the first endpoint defining functions to be performed by the first endpoint, and a processor. The processor is configured 
20 by the software to perform the steps of: assigning a sequence number to a first multi-media data fiow packet received 
by a first endpoint, wherein the first multi-media data fiow packet is within a series of multi-media data flow packets; 
pseudo-randomly shuffling the sequence number of the first multi-media data flow packet; and, transmitting the pseudo- 
randomty shuffled sequence number to a second endpoint. 

[0014] The encryption system may instead be provided completely in hardware wherein functionality deflned by the 
25 software is instead provided by a controller that Is programmed to perform the steps of: assigning a sequence number 
to a first multi-media data flow packet received by a first endpoint, wherein the first multi-media data fiow packet is 
within a series of multi-media data flow packets; pseudo-randomly shuffling the sequence number of the first data flow 
packet; and transmitting the pseudo-randomly shuffled sequence number to a second endpoint. 
[0015] The present invention can also be viewed as providing a method for providing encryption for rerouting multi- 
30 media data flow packets. In this regard, the method can be broadly summarized by the following steps: assigning a 
sequence number to a first multi-media data fiow packet received by a first endpoint, wherein the first multi-media data 
flow packet is within a series of multi-media data flow packets; pseudo-randomly shuffling the sequence number of the 
first multi-media data flow packet; and transmitting the pseudo-randomly shuffled sequence number to a second end- 
point. 

35 [0016] other features and advantages of the present invenfion will be or will become apparent to one with skill in the 
art upon examinafion of the following drawings and detailed description. It is intended that all such additional systems, 
methods, features, and advantages be included within this description, be within the scope of the present invention, 
and be protected by the accompanying claims. 

40 BRIEF DESCRIPTION OF THE DRAWINGS 

[0017] The invention can be better understood with reference to the following drawings. The components of the 
drawings are not necessarily to scale, emphasis instead being placed upon clearly illustrafing the principles of the 
present Invention. Moreover, in the drawings, like referenced numerals designate corresponding parts throughout the 
45 several views. 

FIG. 1 is a block diagram that illustrates a communication network, wherein the use of session routers and multi- 
media routers is demonstrated, for implementation of the present encryption system. 

FIG. 2 is a block diagram illustrating the use of three multi-media routers instead of the two shown by FIG. 1, in 
50 accordance with an alternate embodiment of the invention. 

FIG. 3 is a block diagram further illustrating a multi-media router, such as the first or second multi-media router of 
FIG. 1, which may be used for purposes of providing encryption capabilities within the communication network of 
FIG. 1. 

FIG. 4 is a flow chart illustrating operations performed by the present encryption system to provide encryption of 
55 multi-media data packets transmitted within RTP flows. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

[0018] The present invention provides an encryption system for encrypting multi-media data flow packets. The en- 
cryption system of the present invention can be implemented in software, firmware, hardware, or a combination thereof. 
5 In the preferred embodiment of the invention, which is intended to be a non-limiting example, a portion of the encryption 
system is implemented In software that is executed by a computer, for example, but not limited to, a personal computer, 
workstation, minicomputer, or mainframe computer. 

[0019] The software portion of the encryption system, which comprises an ordered listing of executable Instructions 
for implementing logical functions, can be embodied in any computer-readable medium for use by, or in connection 
10 with, an instruction execution system, apparatus, or device such as a computer-based system processor-containing 
system, or other system that can fetch the instructions from the instruction execution system, apparatus, or device and 
execute the instructions. In the context of this document, a "computer-readable medium" can be any means that can 
contain, store, communicate, propagate or transport the program for use by or in connection with the instruction exe- 
cution system, apparatus or device. The computer-readable medium can be, for example, but not limited to, an elec- 
ts tronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation me- 
dium. More specific examples (a non-exhaustive list) of the computer-readable medium would include the following: 
an electrical connection (electronic) having one or more wires, a portable computer diskette (magnetic), a random 
access memory (RAM) (magnetic), a read-only memory (ROM) (magnetic), an erasable programmable read-only mem- 
ory (EPROM or Flash memory) (magnetic), an optical fiber (optical), and a portable compact disk read-only memory 
20 (CD ROM) (optical). Note that the computer-readable medium could even be paper or another suitable medium upon 
which the program is printed, as the program can be electronically captured, via for instance, optical scanning of the 
paper or other medium, then compiled, interpreted or otherwise processed in a suitable manner, if necessary, and then 
stored in a computer memory. 

[0020] In the transmission of multi-media data packets from a first endpoint to a second endpoint the processing of 
25 multiple transmission routes, and the selection of a best route, is desirable. An example of a system that provides for 
route processing and selection is provided by the copending U.S. patent application entitled, "System and Method for 
Assisting in Controlling Real-time Transport Protocol Flow Through Multiple Networks via Multi-media Flow Routing." 
by MeLampy, et al, filed on July 23, 2001, and having serial number 09/911,256 (hereinafter, "the '256 patent appli- 
cation"), the disclosure of which is hereby incorporated by reference in its entirety 
30 [0021] The '256 patent application teaches use of a session router to select multiple routes and process them in 
order, selecting from a set of session initiation protocol (SIP) agent(s) that are otherwise equal using various distribution 
strategies. This process leads to managing the path of the resulting real-time packet (RTP) flow. The US patent appli- 
cation entitled "System and Method for Providing Rapid Rerouting of Real Time Multi-media Flows," by MeLampy, et. 
al.. filed on July 23, 2001, having serial number 09/911,304 (hereinafter "the '304 patent application"), the disclosure 
35 of which in hereby incorporated by reference in its entirety, teaches use of multi-media routers for guiding the resulting 
RTP flows selected and processed by the session router through certain thresholds. Therefore, the combination of the 
abovementioned '256 and '304 patent applications creates a high-quality border between various IP networks. Without 
these mechanisms, data packets would flow whichever way networks would allow. 

[0022] FIG. 1 is a block diagram that illustrates a communication network 102, wherein the use of session routers 
40 (SRs) and multi-media routers (MRs) is demonstrated, for implementation of the present encryption system. As shown 
by FIG. 1, a first carrier network 112 comprises a first SIP phone 114, such as those produced by Pingtel of Massa- 
chusetts, U.S.A., a first session router 116, and a first multi-media router 118. A second carrier network 132, which is 
connected to the first carrier network 112 via an Internet 122, comprises a second SIP phone 134, a second session 
router 138, and a second multi-media router 136. It should be noted that any device, SIP or non-SIP, may be included 
45 within the first and second carrier networks 112, 132 that requires communication between the networks 112, 132. 
Other RTP data sources include, but are not limited to, integrated access devices (IAD), VoIP gateways (Cisco AS5300, 
Sonus GSX), and multi-media sources (PCs, IP-PBXs). Further, communication between the networks 112. 132 may 
instead be provided via a wide area network (WAN) or local area network (LAN). Also, the Internet 122, may instead 
be a data network domain since the multi-media routers 118, 136 are utilized between two domains within the Internet 
50 122. 

[0023] Alternatively, a router, such as, but not limited to. a border router, may be located between the first and second 
multi-media routers 118, 136 to assist in communication between the first and second carrier networks 112, 132. Com- 
munication from the first SIP phone 114 to the second SIP phone 134 may instead be provided by the first and second 
multi-media routers 118, 136, as Is further explained in detail hereinbelow. It should be noted, however, that an additional 
55 router, such as a border router, is not necessary in providing communication between the first and second carrier 
networks 112, 132. It should also be noted that communication may be from a session router, directly to the Internet 
122. and not through the multi-media routers 118. 136. 

[0024] The first and second session routers 116, 138 provide session initiation protocol (SIP) and telephony routing 
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over IP (TRIP) protocol support as described in detail by the presently pending application titled "System and Method 
for Assisting In Controlling Real-Time Transport Protocol Flow Through Multiple Networks," by MeLampyet al, having 
serial number 09/844,204, and being filed on April 27, 2001 . the disclosure of which is incorporated herein by its entirety. 
[0025] Additional multi-media routers may be provided between the first multi-media router 118 and the second multi- 
5 media router 1 36. FIG. 2 is a block diagram illustrating the use of three multi-media routers Instead of two. In accordance 
with an alternate embodiment of the invention. As such, the first multi-media router 118, located within the first carrier 
network 112, communicates with a third multi-media router 137. via the Internet 122. The third multi-media router 137, 
in turn, communicates with the second multi-media router 136, within the second carrier network 132, via the Internet 
122. 

to [0026] Communication between two multi-media routers is herein referred to as a communication segment, wherein 
communication segments are defined as Inter-multi-media router RTP flows. Therefore, If an RTP flow is from a source, 
such as the first SIP phone 114, in FIG. 1, to a first multi-media router, to a second multi-media router, and finally, to 
a destination, such as the second SIP phone 134, three communication segments exist. The first communication seg- 
ment is from the source to the first multi-media router; the second communication segment is from the first multi-media 

15 router to the second multi-media router; and the third communication segment is from the second multi-media router 
to the destination. Of specific Interest with reference to the present encryption system is the second communication 
segment, namely, from the first multi-media router to the second multi-media router. It should be noted, however, that 
encryption In accordance with the present Invenfion may be provided between any two endpoints. 
[0027] The introduction of multi-media routers into the real-time multi-media fiow forces data packets through a 

20 known Interface, which may act as an encryption multi-mediator. FIG. 3 is a block diagram further illustrating a multi- 
media router 118, such as the first or second multi-media router 118. 136, which may be used for purposes of providing 
encryption capabillfies within the communication network 102. As shown by FIG. 3, the multi-media router 118 com- 
prises a flow quality management engine 202, a traffic manager 206, a communication interface 208, a host processor 
212, a network processor 214, input devices 216 and output devices 218. all of which communicate within the multi- 

25 media router 118 via local link 219. Each of the above-mentioned are described in detail In the presently pending patent 
application entitled, "System and Method for Providing Rapid Rerouting of Real Time Multi-Media Flows," filed on July 
23. 2001, and having serial number 09/911,304. 

[0028] Specifically, the traffic manager 206 is preferably used for measuring and enforcing IP session data flow rates, 
or traffic, for providing traffic measurement. An example of a commercially available traffic manager 206 is an NPX5700 
30 traffic manager sold by MMC Networks located in California, USA. Essentially, the traffic manager 206 measures the 
number of data packets that flow through the communication interface 208. The traffic manager 206 works in concert 
with the network processor 214 such that once a forwarding decision is made, the traffic manager 206 queues the 
received packet Into its respective IP flow and associated priority. 

[0029] As is known in the art. the traffic manager 206 comprises a memory for temporarily storing received data 
35 packets. From an inbound perspective, the multi-media router 118 Is able to monitor RTP data flows and enforce 
maximum data rates by either dropping packets or marking them as eligible for discarding if they are outside a bandwidth 
allocated for the data fiow. The traffic manager 156 may also be instructed by a session router to accept a specific 
amount of data In accordance with an allocated bandwidth and bit rate. Therefore, if data is received at a higher bit 
rate than allowed by the session router, the data received at the higher bit rate is not transmitted. It should be noted 
^0 that the characteristics specified by the session router may instead be programmed directly into the multi-media router 
118 without using the session router. 

[0030] The fiow quality management engine 202 provides translation services within the multi-media router 118, 
quality measurement services, and detection and correction of upstream and downstream failures. The translation 
services performed by the flow quality management engine 202 within the multi-media router 118 comprise the capa- 
45 bility to translate a source address, desfination address, source port, destination port or any combination of these fields. 
The multi-media router 118 is also capable of removing and/or inserting a multi-protocol label switching (MPLS) tag in 
the IP header of a mulfi-media data flow packet. In addition, the multi-media router 118 is capable of inserting or 
modifying a diffserv codepoint located within the IP header of the packet, which, as is known In the art, is used to modify 
priority of the data packets, 

50 [0031] The quality measurement services provided by the flow quality management engine 202, within the multi- 
media router 118, are provided on a per flow basis, wherein a multi-media data flow is defined by a source IP address, 
a destinafion IP address, a source port, and a destination port. Quality measurement preferably comprises maintaining 
current statistics for the flow within the network processor 214, as well as aggregate and min/max statistics for the flow 
where applicable. Examples of statistics that may be collected Include latency, jitter and packet loss for a pre-defined 

55 window of fime. It should be noted that the window can be identified via the session router or the multi-media router 
118. Aggregate statistics may include transmitted packets, dropped packets and duplicate packets. Minimum and max- 
imum statistics, otherwise referred to as boundary statistics, may also be collected which may Include latency, jitter 
and packet loss per window of time. The flow quality management engine 202, within the multi-media router 118, also 
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provides the detection and correction of upstream and downstream failures In the transmission of RTP data packets 
[0032] The host processor 212, similar to the traffic manager 206, provides detection and correction of upstream 
and downstream failures. Methods used by the host processor 212 to detect and correct upstream and downstream 
failures In the transmission of RTP data packets Include, but are not limited to. the use of link failures and external 
5 management events 

[0033] A memory unit 222 is also located within the multi-media router 118. Encryption software 224 is stored within 
the memory unit 222 for providing logic to be performed in accordance with the present encryption system. FIGS. 4 
and 5, described hereinbelow, provide flow charts illustrating functionality performed by the present encryption system 
in accordance with the encryption software 224 of FIG, 3. 

10 [0034] FIG. 4 is a flow chart illustrating operations performed by the present encryption system to provide encryption 
of multi-media data packets transmitted within RTP flows. With regard to FIG. 4 described hereinbelow, a block rep- 
resents a module, segment, or portion of code, which comprises one or more executable instructions for implementing 
the specified logical function(s). It should also be noted that in some alternate implementations, the functions noted in 
the blocks may occur out of the order noted. For example, two blocks shown In succession may in fact be executed 

15 substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the func- 
tionality involved. 

[0035] As shown by block 302, sequence numbers within the RTP flow are randomly shuffled. In accordance with 

the preferred embodiment of the invention, a sequence number is assigned to each RTP multi-media data flow packet 
within an RTP flow such that when an RTP multi-media data flow packet is received, the associated sequence number 
20 may be determined. Randomization code is utilized to provide random shuffling of the sequence numbers. Preferably, 
the random shuffling is algorlthmically predictable if a key to the randomization code Is known. Therefore, since the 
randomly shuffled sequence numbers are algorithmically predictable if the key is known, the sequence numbers really 
are not randomly shuffled but are instead, pseudo-randomly shuffled. 

[0036] The following provides an example of code that may be utilized to provide randomization of sequence numbers 
25 that are used to provide encryption of multi-media packets. It should be noted that the following "C" code, which may 
be written on a Linux platform, is provided as an example of code that may be used to randomize, and therefore, is 
not intended to be a limitation on code that may be used for randomization purposes. 

Example: 

30 

[0037] 



#include <stdlib.h> 

35 



40 



mainQ 

{ 



45 

} 



int salt = 89; 
int sequence = 1; 

srand (salt); 

for (sequence = 1; sequence <= 10; -H-sequence) { 

printf("sequence %d=%d\n", sequence, rand()); 

} 



When executed, this code produces the following output: 

50 

sequence 1 = 1888747329 
sequence 2 = 1601588182 
sequence 3 = 1967410106 
sequence 4 = 1009646503 
55 sequence 5 = 230365314 

sequence 6 = 1353059132 
sequence 7 = 1304719048 
sequence 8 = 497992519 
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sequence 9 = 346418450 
sequence 10 = 17439427 

Therefore, a one to one mapping of the sequence numbers in order may be made to random numbers. For instance. 

5 1304719048 maps to 7, and 7 maps to 1304719048. 

[0038] Applying this mapping to the step of randomly shuffling sequence numbers within an RTP multi-media data 
flow (block 302). the first RTP multi-media data flow packet has a sequence number 1888747329 (which maps to 1), 
the second packet has a sequence number 1601588182 (which maps to 2), and so on. Using this algorithm, the re- 
ceiving side may produce a sequence of expected sequence numbers and restore them. As an example, a sender that 

^0 Is transmitting an original sequence number of 1 (or a salt value of 1 ) may replace the original sequence number with 
an encrypted sequence number of 1888747329, The encrypted sequence number of 1888747329 may then be trans- 
mitted to a receiving side. Upon receipt of the encrypted sequence number, the side receiving may restore to the original 
sequence number of 1 . Therefore, If the starting value, othen/vise referred to as the original value, is known, an encrypted 
sequence number can be produced and decoded. However, If the original sequence number is not known, the encrypted 

t5 sequence can not be anticipated and later decoded. 

[0039] In accordance with an alternate embodiment of the invention, a series of original sequence values may be 
utilized. As a result, a series of encrypted sequence numbers are utilized which makes decryption much less likely. 
Therefore, if there are multiple flows of multi-media data packets (RTP data packets) being transmitted from the first 
multi-media router to the second multi-media router, each multi-media packet may have a separate original sequence 

20 value, thereby providing excessive scrambling of the data associated with the multi-media data packet. 

[0040] Returning to FIG. 4, a destination port address for the multi-media data packet may also be encrypted (block 
304). Preferably, an IP address is used to enable delivery of a multi-media data packet to a multi-media router. As is 
known in the art, an IP address comprises an address of a destination device, as well as a destination port address 
within the destination device. With reference to the present encryption system, the IP address identifies a destination 

25 multi-media router and a destination port address within the same multi-media router. Since the IP address is used to 
deliver the multi-media data packet to the destination multi-media router, it is possible to encrypt the destination port 
address to provide further difficulty In decrypting transmitted multi-media data packets. 

[0041] In accordance with the preferred embodiment of the invention, the port address number is encrypted so that 
it may be restored in the future, as is described in detail hereinbelow. Following the above provided example, a salt 

30 value, or original sequence number, of eighty-nine (89) has been assigned as an identifier of the group of ten sequence 
numbers that may be used for encryption purposes. A first method of providing encryption of the port address number 
is by having a repeating sequence of numbers for the destination port address number. In accordance with the present 
example, the sequence of numbers starts at 1 888747329 and progresses through the tenth number 1 7439427, It should 
be noted that the length of the sequence number may be variable. 

35 [0042] In accordance with the first method, the port address number may be based on either the salt value, which 
In the present example is 89, or it may be determined from the sequence numbers. An example of utilizing the salt 
value follows. If the salt value is 89, the sequence numbers are determined to be 1 through 10, and the sequence 
numbers are repeated, the port number is 89 (the salt value) multiplied by 10 (the length of the sequence), or 890. In 
addition, if there is more than one multi-media data flow, the random port address numbers are very difficult to detect 

^0 without knowledge of the salt value. 

[0043] As shown by block 306, re-sequencing of the multi-media data packets is then performed within an appropriate 
jitter buffer size. A jitter buffer Is typically implemented in voice gateways to compensate for fluctuating network con- 
ditions. The jitter buffer is a packet buffer that holds incoming multi-media data packets for a specified time before 
forwarding them for decompression. This process has the effect of smoothing the multi-media data packet flow, thereby 

45 increasing the resiliency of a compressor/decompressor (CODEC) to packet loss, delaying packets, and producing 
other transmission effects. However, the downside of the jitter buffer is that it can add significant delay. The jitter buffer 
size is configurable, and can be optimized for given network conditions. The jitter buffer size is usually set to be an 
Integral multiple of the expected packet inter-arrival time in order to buffer an integral number of multi-media data 
packets. 

50 [0044] Re-sequencing of multi-media data packets allows multi-media data packets to be transmitted from a first 
multi-media router to a second multi-media router in a random manner within a small repeating window. In accordance 
with the abovementioned example, multi-media data packets may be transmitted, and arrive, in a normal order such 
as 1 , 2, 3, 4. 5, etc. However, in accordance with the re-sequencIng of multi-media data packets, the multi-media data 
packets may be transmitted in any order desired, Including, but not limited to, 2, 5, 4, 1, 3, etc. This re-sequencing 

55 prevents anyone from assembling the multi-media data packets in the order sent, disregarding the sequence number, 
and being able to decipher the communication. 

[0045] As shown by block 308, bit manipulation within the multi-media data packet is performed to provide further 
encryption of the multi-media data packets. An example of bit manipulation may be performed using bitsize operations 
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that are restorable, such as, but not limited to, the - operator (newbits = -oldbits). As is known in the art, the 
operator is a negation operator. Therefore, every "1" bit becomes a "0" bit, and every "0" bit becomes a "1" bit. As an 
example, the binary number 10011100 becomes 01100011. 

[0046] Other bitsize operations may include shifting bits to the left, as is illustrated in the examples hereinbelow. 

5 

Example : 
[0047] 

10 

Newbits = (oldbits & OxOf) « 4 || (oldbits & OxfO » 4) 



This example essentially swaps bits 0-3 with bits 4-7. 

[0048] In addition, bytes may be swapped in an algorithmic fashion based on a mapping sequence rendered from a 

15 random number. As an example, assuming that there are 256 bytes in a multi-media packet, the bytes may be swapped 
or mixed based on a sequence rendered from 1 to 256 where duplicates are skipped. Therefore, any salt value may 
be used, and when the random number is generated it is modulo divided by 256. The sequence is then run until there 
are 256 unique numbers. If a duplicate is encountered during running of the sequence, it is skipped. Thus a pattern 
emerges such as the pattern shown hereinbelow, 

20 

1=23 
2=220 
3=19 
4=113 
25 5=78 



256=21 

[0049] This sequence can be created very efficiently. As mentioned hereinabove, if a duplicate is encountered, the 
30 duplicate is skipped. Thus, if a second 19 is generated when sequence 15 is being computed, the 19 is skipped, and 
a new call to a random number generator generating the sequence is called so that the sequence will be complete. 
[0050] The following provides a detailed example of sequencing random numbers. Assuming use of the sequence 
numbers provided in the example illustrated hereinbelow, if a sequence of numbers from 0 to 4 is desired to swap 
bytes, the following steps are performed. The random number is taken and divided by the number of sequence numbers 
35 desired (in this example 5) (1 888747329 / 5 = 377749465, remainder = 4). The remainder is then recorded after division. 
The process is then repeated for the entire sequence resulting in the following. 

sequence 1=4 

sequence 2 = 2 
40 sequence 3 = 1 

sequence 4 = 3 

sequence 5 = 4 

sequence 6 = 2 

sequence 7 = 3 
45 sequence 8 = 4 

sequence 9 = 0 

sequence 10 = 2 

A list is assembled in order having no duplicates and using the sequence of numbers shown above (4, 2, 1.3, 0). It 
50 should be noted that sequences 5. 6, 7 and 8 were dropped since they were duplicates until five unique integers from 
0-4 were obtained. 

[0051] To swap the bytes in this order, the new sequence is used as index positions in a "byte swapping" scheme. 



newarray[4 
55 newarray[2 
newarray[1 
newarray(3 
newarray[0 



= oldarray[0] 
= oidarray(1] 
= oldarray[2] 
= oldarray[3] 
= oldarray[4] 



EP 1 289 225 A2 



[0052] To restore the data to its original form, the following "reverse" translations are performed. 



otdarray[0 
oldarray[1 
oldarray[2 
oldarray[3 
oldarray[4 



= newarray[4] 
= newarray[2] 
= newarray[1] 
= newarray[3] 
= newarray[0] 



[0053] An example of how the generator may be algorithmically coded follows. 

Example: 

[0054] 



#include <stdlib.h> 
mainQ 

{ 

int salt = 89; 
int sequence = 0; 
int results[256]; 

srand(salt); 

for (sequence=0; sequence < 256; -H-sequence) { 

results[sequence] = randQ; /* Get the next random number */ 
for (i=0; i < 256 && I < sequence; ++i) { /* See if the sequence is in the list */ 
if (results[sequence] = results[i]) { 

—sequence; /* Already in the list, skip this one */ 
break; 



} 

} 

} 

for (sequence==0; sequence <256; -H-sequence) { /* Display the list */ 
printf("Sequence = %d, New sequence number=%d\n", 
sequence, results[sequence]); 

} 

} 



With this coded logic, all 256 bytes of the multi-media data packet may be encrypted before leaving the first multi- 
media router, and be restored upon arrival at the second multi-media router. 

[0055] As mentioned hereinabove, any single encryption step described by FIG. 4 may be used to provide encryption 
of multi-media data packets. In addition, any combination of the above-mentioned encryption steps may be used to 
provide encryption of multi-media data packets. Further, the abovementioned operations described by the flowchart 
of FIG. 4 may be performed by a programmed controller, or any other hardware for that matter. Instead of, or in addition 
to being performed in accordance with software. 

[0056] It should be emphasized that the above-described embodiments of the present invention, particularly, any 
"preferred" embodiments, are merely possible examples of implementations, merely set forth for a clear understanding 
of the principles of the invention. Many variations and modifications may be made to the above-described embodiment 
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(s) of the invention without departing substantially from the spirit and principles of the invention. All such modifications 

and variations are intended to be included herein within the scope of this disclosure and the present Invention and 
protected by the following claims. 

5 

Claims 

1. A method for providing encryption for the rerouting of multi-media data flow packets, comprising the steps of: 

10 assigning a sequence number to a first multi-media data flow packet received by a first endpoint, wherein said 

first multi-media data flow packet is within a series of multi-media data flow packets; 
pseudo-randomly shuffling said sequence number of said first multi-media data flow packet; and 
transmitting said pseudo-randomly shuffled sequence number to a second endpoint. 

15 2, The method of claim 1 , further comprising the step of pseudo-randomly shuffling a destination address of said first 
multi-media data flow packet. 

3. The method of claim 1, characterized in that said series of multi-media data flow packets, including said first 
multi-media data flow packet, are assigned sequence numbers that are each pseudo-randomly shuffled prior to 

20 said transmitting step, and further comprising the step of re-sequencing said series of multi-media data flow packets 

so that said re-sequenced multi-media data flow packets are transmitted from said first endpoint to said second 
endpoint in a random order. 

4. The method of claim 1 . further comprising the step of performing bit manipulation within said first multi-media data 

25 flow packet, especially by using a bitsize operation that is restorable. 

5. A system for providing encryption for the rerouting of multi-media data flow packets, comprising: 

means for assigning a sequence number to a first multi-media data flow packet received by a first endpoint, 
30 wherein said first multi-media data flow packet is within a series of multi-media data flow packets; 

means for pseudo-randomly shuffling said sequence number of said first multi-media data flow packet; and 
means for transmitting said pseudo-randomly shuffled sequence number to a second endpoint. 

6. The system of claim 5, further comprising means for pseudo-randomly shuffling a destination address of said first 
35 multi-media data flow packet. 

7. The system of claim 5. further comprising means for re-sequencing said series of multi-media data flow packets 

so that said re-sequenced multi-media data flow packets are transmitted from said first endpoint to said second 
endpoint in a random order. 

40 

8. The system of claim 5, further comprising means for performing bit manipulation within said first multi-media data 
flow packet, especially bit manipulation using a bitsize operation that Is restorable. 

9. The system of claim 5, characterized in that 

45 said first endpoint is connected to said second endpoint, said first endpoint comprising: 

a transceiver; 

software stored within said first endpoint defining functions to be performed by said first endpoint; and 
a processor configured by said software to perform the steps of: 

50 

assigning a sequence number to a first multi-media data flow packet received by a first endpoint. wherein 
said first multi-media data flow packet is within a series of multi-media data flow packets; 
pseudo-randomly shuffling said sequence number of said first multi-media data flow packet; and 
transmitting said pseudo-randomly shuffled sequence number to a second endpoint. 

55 

10. The system of claim 9, characterized in that said pseudo-random shuffling is performed via use of randomization 
code that is algorithmlcally predictable if a key to said randomization code is known. 



4 
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11. The system of claim 9. characterized in that said processor is further configured by said software to perform the 

step of pseudo-randomly shuffling a destination address of said first multi-media data flow packet. 

12. The system of claim 9, characterized in that said series of multi-media data flow packets, including said first multi- 

5 media data flow packet, are assigned sequence numbers that are each pseudo-randomly shuffled prior to said 

transmitting step, and that said processor is further configured by said software to perform the step of re-sequencing 
said series of multi-media data flow packets so that said re-sequenced multi-media data flow packets are trans- 
mitted from said first endpoint to said second endpoint in a random order. 

10 13. The system of claim 9, characterized In that said processor is further configured by said software to perform the 
step of performing bit manipulation within said first multi-media data flow packet, especially by using a bitsize 
operation that is restorable. 

14. The system of claim 9, characterized In that 

15 said first endpoint Is connected to said second endpoint, said first endpoint comprising: 

a transceiver: and 

a controller programmed to perform the steps of: 

20 

assigning a sequence number to a first multi-media data flow packet received by a first endpoint, wherein 
said first multi-media data flow packet is within a series of multi-media data flow packets; 
pseudo-randomly shuffling said sequence number of said first data flow packet; and 
transmitting said pseudo-randomly shuffled sequence number to a second endpoint. 

25 

15. The system of claim 14, characterized in that said controller is further programmed to perform the step of pseudo- 
randomly shuffling a destination address of said first multi-media data flow packet. 

16. The system of claim 14. characterized In that said series of multi-media data flow packets, Including said first 
30 multi-media data flow packet, are assigned sequence numbers that are each pseudo-randomly shuffled prior to 

said transmitting step, and that said controller is further configured by said software to perform the step of re- 
sequencing said series of multi-media data flow packets so that said re-sequenced multi-media data flow packets 
are transmitted from said first endpoint to said second endpoint in a random order. 

35 17. The system of claim 14, characterized in that said processor Is further configured by said software to perform 
the step of performing bit manipulation within said first multi-media data flow packet, especially by using a bitsize 
operation that is restorable. 

18. The method of claim 1 or the system of claim 5. 9 or 14. characterized in that said multi-media data flow packets 
40 are real-time multi-media data flow packets. 

19. The method of claim 1 or the system of claim 5, 9 or 14, characterized in that said series of multi-media data 
flow packets, including said first multi-media data flow packet, are assigned sequence numbers that are each 
pseudo-randomly shuffled prior to said transmitting step. 

45 

20. The method or the system of claim 19. characterized in that said re-sequenced multi-media data flow packets 
are transmitted within a predefined jitter buffer size. 

21. The method of claim 1 or the system of claim 5, 9 or 14, characterized In that said destination address is a 
50 destination port address of said second endpoint. 

22. The method of claim 8 or the system of claim 1 3 or 1 7, characterized In that said bitsize operation uses a negation 
operator, such that every 1 bit becomes a 0 bit and every 0 bit becomes a 1 bit. 

55 23. A system for providing encryption for the routing of multi-media data flow packets, comprising: 

a first endpoint connected to a second endpoint, wherein said second endpoint comprises: 



■ 
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a transceiver; 

software stored within said second endpoint defining functions to be performed by said second endpoint; 
and 

a processor configured by said software to perform the steps of: 

unshuffling a pseudo-randomly shuffled sequence number received from said first endpoint, via use 
of an alogrithmic key; and 

deriving a first data flow packet from said unshuffled sequence number, wherein said first data flow 
packet is within a series of data flow packets. 
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(54) System and method for providing encryption for rerouting of real time multi-media flows 



(57) A system for providing encryption for the rerout- 
ing of multi-media data flow packets is disclosed. Gen- 
erally, a first endpoint is connected to a second end- 
point, wherein the first endpoint comprises a transceiv- 
er, encryption software stored within the first endpoint 
defining functions to be performed by the first endpoint, 
and a processor. The processor is configured by the en- 
cryption software to perform the steps of: assigning a 
sequence number to a first multi-media data flow packet 



received by a first endpoint, wherein the first multi-media 
data flow packet is within a series of multi-media data 
flow packets; pseudo-randomly shuffling the sequence 
number of the first multi-media data flow packet; and, 
transmitting the pseudo-randomly shuffled sequence 
number to a second endpoint. These steps may be per- 
formed by a programmed controller, or other hardware, 
instead of, or in addition to, being performed in accord- 
ance with software. 
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